Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | chromium-browser | 44.0.2403.89-1~deb8u1 |
Vulnerabilities 23
-
Unscored —
content/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130 does not properly cons…
-
Unscored —
Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation o…
-
Unscored —
bindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creati…
-
Unscored —
The DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc in Google Chrome before 43.0.2357.130 does no…
-
Unscored —
The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in G…
-
Unscored —
PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which …
-
Unscored —
Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attac…
-
Unscored —
Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, a…
-
Unscored —
Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes i…
-
Unscored —
Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation …
-
Unscored —
Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote att…
-
Unscored —
content/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF docum…
-
Unscored —
Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chr…
-
Unscored —
SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of…
-
Unscored —
core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 …
-
Unscored —
Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome befo…
-
Unscored —CVE-2015-1283 EPSS 18%
Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2…
-
Unscored —
The LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google Chrome before 44.0.2403.…
-
Unscored —
The XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer…
-
Unscored —
Blink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits the cases in which a C…
-
Unscored —
The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a …
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to cause a denial of service …